PatchTheCVEmalbum vulnerabilities and fixes
Recent CVEs affecting malbum, with upgrade or downgrade steps. 3 tracked.
malbum has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-02-21. Highest priority: CVE-2007-1045 (score 62/100).
- CVE-2007-1045 HIGH 10.0 DOWNGRADE mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", whic
- CVE-2006-6069 MEDIUM 5.0 UPGRADE index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal
- CVE-2006-6068 LOW 2.6 UPGRADE Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier all
FAQ
How do I fix malbum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is malbum being exploited right now?
None of the tracked malbum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which malbum CVE should I patch first?
CVE-2007-1045 currently ranks highest (62/100): mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", whic.